Privacy Policy

Last updated: 2026-04-11

Lusis ("we", "our", "the app") is a private location-sharing app operated by STODR LLC, a Washington State (USA) limited liability company ("STODR", "the operator"). This policy explains what data Lusis collects, how it's used, who it's shared with, and the choices you have.

Plain-English summary

The short version, in plain language, is:

• We do not sell your data. Ever. To anyone. This is not a "we won't for now" — this is the business model.
• We do not look at your data. No human at STODR reads your locations, your check-ins, or your saved places. The only exception is if you contact us for support and explicitly ask us to look at something specific in your account — and even then, we touch only what we need to help you.
• We do not show you ads. No third-party advertising SDKs are in Lusis.
• We do not run analytics or tracking SDKs. No Google Analytics, no Firebase Analytics, no Segment, no Amplitude, no Mixpanel. Nothing.
• This app is built for us too. We use Lusis with our own loved ones. We're not looking to sell the company, and if we ever did, we would only do so in a way that preserves these privacy commitments for existing users. No creepy pivots, no data fire sales.
• You own your data. You can view, update, or delete it at any time. Most of it is editable directly from the app's settings.
• Your location is only shared with the people you explicitly add to your shared circle. When you remove someone from your circle, they immediately lose access to your live location and any new check-ins.
• You can delete your account and everything in it at any time. Email privacy@stodr.com from your account's email address with the subject "Delete my Lusis account" and we will wipe everything within 7 days and confirm when it's done. (Self-service deletion from the app's Settings is coming in a future update.)
• You must be at least 13 years old to use Lusis. If you are under 18, you should have a parent or guardian's permission.

The rest of this document is the full legal version of the above.

Data we collect

Account data

When you sign up, we collect:

• Email address — for authentication and password recovery
• Display name — shown to other members of your shared circle
• Profile photo (optional) — shown to other members of your shared circle
• Phone number (optional) — for direct-call shortcuts from the people tray

Location data

When you enable location sharing, Lusis collects:

• Latitude / longitude — your current position
• Altitude, speed, heading — motion data from your phone's GPS
• Accuracy — how precise the GPS fix is
• Battery level and charging state — so your circle can see if your phone is about to die
• Timestamp — when the fix was recorded

Location is reported at an adaptive interval that balances accuracy against battery life — faster updates while you're moving, slower updates while you're stationary, and longer gaps when your battery is low. The exact tuning changes over time as we learn more from real usage; specific intervals aren't part of this policy.

Usage data

• Check-in messages — short one-tap messages (kisses, hugs, ETAs, "on my way") you send to people in your circle
• Saved places — named locations (home, school, gym) and their radii
• Geofence events — when you arrive at or leave a saved place, if you've enabled notifications for that place

Technical data

• Device type (iOS or Android) and OS version — for compatibility
• App version — for bug triage
• Push notification token — so we can deliver check-in notifications

How we use your data

We use the data above only to:

1. Show your location to members of your shared circle you've explicitly invited and who have accepted the invitation.
2. Deliver check-in messages from one circle member to another.
3. Trigger geofence notifications when you arrive at or leave a saved place.
4. Operate the app — authentication, data sync, and minimal server-side logs required for service operation. No third-party crash reporters, analytics, or behavioral logging.

We do not use your data for:

• Advertising
• Profiling
• Sale to third parties
• Sharing with data brokers
• Training machine learning models

Where your data is stored

All data is stored on Supabase infrastructure (supabase.com), which uses data centers in the European Union (Frankfurt, Germany). Data is encrypted at rest and in transit. Supabase is our data processor; they process data only on our instructions and do not use it for their own purposes.

Who can see your location

Your location is visible only to:

1. Members of the shared circle you created or joined, and only while you have location sharing enabled.
2. The operator, when investigating account-specific issues you've reported to us, and only with your explicit consent.

Your location is never visible to:

• Other users who are not in your circle
• Advertisers
• Data brokers
• Any third-party service other than Supabase (our storage provider)

Location history retention

Location points are retained while your account is active. You can delete your entire account and all associated data at any time by emailing privacy@stodr.com (see "Account deletion" below). Self-service deletion from the app's settings and a configurable auto-delete window are on our roadmap and will be announced in-app when available.

Push notifications

Push notifications are delivered via Expo Push (a thin layer over Apple Push Notification service and Firebase Cloud Messaging) for circle check-in alerts. Push tokens are cleared when you sign out or lose access to the app.

Your rights

You have the right to:

• Access — all data we hold about you
• Export — your data in a machine-readable format (JSON)
• Correct — most of your data (display name, phone number, profile photo, custom places) can be edited directly in the app's settings. For anything else, email privacy@stodr.com.
• Delete — your account and all associated data
• Withdraw consent — for location sharing at any time, by toggling sharing off in the app's settings

To exercise any right that isn't already self-service in the app, email privacy@stodr.com. We respond within 30 days.

If you are in the European Economic Area, United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

California residents (CCPA / CPRA)

If you are a California resident, you have the additional right to know what personal information we collect and how we use it (covered above), the right to delete it, the right to correct it, and the right to opt out of sale. We do not sell personal information to any third party. There is nothing to opt out of, but if this ever changes we will provide a clear opt-out mechanism.

Account deletion

You can delete your account and all associated data by emailing privacy@stodr.com with the subject line "Delete my Lusis account" from the email address associated with your account. (Self-service account deletion will be added to the app in a future update.)

Upon deletion, we will remove:

• Your profile (display name, photo, phone number)
• All your location history
• All your check-ins (sent and received)
• Your saved places and geofences
• Your push notification token
• Your authentication record

Changes to this policy

We will post any changes to this page and update the "Last updated" date above. If the changes are material, we will notify active users in-app before the changes take effect.

Contact

Questions or requests: privacy@stodr.com

Operator: STODR LLC, Washington State, USA